$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/fd1e06de-277c-36d8-8c43-202a240eaffc.roa File: fd1e06de-277c-36d8-8c43-202a240eaffc.roa (raw, json) Hash identifier: gcGlGGR4xx+oJVP2qZ7zJwmtLlz9nigLDE1x4e/4AYg= Subject key identifier: DB:36:9A:11:C7:9D:18:99:1D:60:12:66:2C:2E:8C:62:A7:FE:EC:D8 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B76F22434B64FA69E83E15640 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/fd1e06de-277c-36d8-8c43-202a240eaffc.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 22773 IP address blocks: 68.14.150.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:24:34:b6:4f:a6:9e:83:e1:56:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=40b396f1-cdac-409d-8722-5a2256f8c9a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:cd:64:7a:7f:c2:a8:f7:ce:ec:a0:93:26:9a: 85:28:42:cc:2f:97:6d:cc:39:11:1a:6b:c9:31:2b: 44:f2:8e:7e:fb:53:04:c2:01:3c:ed:af:1f:3f:fa: 10:b6:4f:b7:42:41:2a:b8:f7:65:0c:70:81:ec:d4: ef:bf:13:0a:36:13:90:67:cc:1c:ac:50:90:98:21: 9c:1c:d5:ed:d1:38:99:19:fc:ea:95:a4:c3:8d:ca: cc:d7:5b:d1:7b:4f:94:78:8c:17:3b:81:88:e4:10: d2:83:43:20:8b:ca:5f:fb:50:fe:37:51:19:52:d1: d0:9d:79:86:98:13:c1:b7:94:3e:f2:ec:cc:c2:97: 4a:88:d6:ec:ec:93:46:ba:8a:23:92:61:5b:8f:ef: 4f:03:14:28:53:97:92:7b:06:54:1f:94:ca:6e:24: 51:ca:1c:76:92:a0:00:27:2a:5c:49:9f:8b:f0:bc: 55:de:c0:04:19:ac:8f:77:b2:b6:38:d4:17:be:84: 58:ad:2d:48:3b:8f:31:78:5d:98:d9:ef:21:b8:8e: be:da:4d:97:11:36:cc:d6:71:02:6c:39:51:ac:cd: 93:58:08:1d:33:af:13:28:6e:30:c5:74:c3:05:ab: 7a:69:3e:f8:99:ff:08:cb:2a:1f:40:65:b6:05:ab: 7b:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:36:9A:11:C7:9D:18:99:1D:60:12:66:2C:2E:8C:62:A7:FE:EC:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/fd1e06de-277c-36d8-8c43-202a240eaffc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.14.150.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:2f:c5:2b:79:f1:4d:81:61:4b:da:ad:d7:a8:32:6c:f3:c7: 18:c6:10:66:71:8b:9f:fc:26:08:f6:af:19:14:34:47:5a:9b: e0:12:5c:87:4a:f2:a0:f3:5a:0f:35:dc:41:14:9d:e8:e0:59: fe:6a:ef:df:c1:91:33:23:24:21:5e:ba:91:3e:8a:30:39:c7: a6:e5:18:b3:d1:db:8e:e2:d5:3c:5f:29:af:dd:57:86:a1:7d: 3a:00:dc:62:6d:6e:b6:b8:3e:e8:5e:fe:fb:b2:e0:a7:b7:5f: 49:a1:a0:b9:28:ed:a8:1a:41:4f:3d:35:7f:d3:5a:66:b4:15: 8d:cb:0d:21:31:d8:6e:69:e0:71:da:7c:b0:55:92:83:02:8c: c9:96:42:9e:b7:15:a3:1f:75:67:b4:3c:cd:9f:1b:10:9b:d1: 70:9c:db:62:73:b3:4d:d8:3c:bc:8d:7f:6a:65:65:9b:3b:96: b2:ee:f7:9c:0b:51:ff:79:d6:7c:35:82:dd:5f:9b:c8:5b:18: 7f:30:72:29:7c:46:8a:57:ba:4b:eb:e6:1a:83:93:05:19:d8: 17:0d:d4:b8:9b:ce:91:a1:db:11:61:04:58:7c:46:24:8d:9d: 9f:84:6a:9a:e6:0e:e7:09:16:bc:2c:a8:1b:e0:51:43:5e:95: 7c:be:4e:16 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28iQ0tk+mnoPhVkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk NDBiMzk2ZjEtY2RhYy00MDlkLTg3MjItNWEyMjU2ZjhjOWEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgc1ken/CqPfO7KCTJpqFKELML5dtzDkRGmvJ MStE8o5++1MEwgE87a8fP/oQtk+3QkEquPdlDHCB7NTvvxMKNhOQZ8wcrFCQmCGc HNXt0TiZGfzqlaTDjcrM11vRe0+UeIwXO4GI5BDSg0Mgi8pf+1D+N1EZUtHQnXmG mBPBt5Q+8uzMwpdKiNbs7JNGuoojkmFbj+9PAxQoU5eSewZUH5TKbiRRyhx2kqAA JypcSZ+L8LxV3sAEGayPd7K2ONQXvoRYrS1IO48xeF2Y2e8huI6+2k2XETbM1nEC bDlRrM2TWAgdM68TKG4wxXTDBat6aT74mf8IyyofQGW2Bat7BwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNs2mhHHnRiZHWASZiwujGKn/uzYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZmQxZTA2ZGUtMjc3Yy0z NmQ4LThjNDMtMjAyYTI0MGVhZmZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARA6WMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG8vxSt58U2BYUvardeoMmzzxxjGEGZxi5/8Jgj2rxkUNEdam+ASXIdK 8qDzWg813EEUnejgWf5q79/BkTMjJCFeupE+ijA5x6blGLPR247i1TxfKa/dV4ah fToA3GJtbra4Puhe/vuy4Ke3X0mhoLko7agaQU89NX/TWma0FY3LDSEx2G5p4HHa fLBVkoMCjMmWQp63FaMfdWe0PM2fGxCb0XCc22Jzs03YPLyNf2plZZs7lrLu95wL Uf951nw1gt1fm8hbGH8wcil8RopXukvr5hqDkwUZ2BcN1LibzpGh2xFhBFh8RiSN nZ+EaprmDucJFrwsqBvgUUNelXy+ThY= -----END CERTIFICATE-----Generated at Wed Oct 15 23:28:23 2025 by rpki-client